Your situation
You want to introduce or further develop your business continuity management (BCM). You are looking for support that understands your processes, uses existing resources and develops workable emergency plans with your team.
We build on your organisation. Vendor-independent and without requiring additional software.
Free of charge and without obligation. With our BCM experts.
Your situation
A cyberattack, an IT outage, a site that is unavailable or a supply shortage: if you are not prepared, you risk long outages, high costs and a loss of trust. The impetus often comes from outside – NIS2, an audit to ISO 27001 or a client asks about your emergency preparedness.
Technical restart plans usually exist already. What is open is which business processes must keep running first, what they depend on and who informs whom in an emergency. And often the question arises whether BCM software has to be purchased first.
We take a different route: we advise independently of vendors and build on your existing emergency plans, documentation and communication channels. A tool can help, but it is not a must – in most cases, effective BCM can be achieved without additional software. BSI Standard 200-4 and ISO 22301 serve as the framework.
Scope of services
BCM is not an off-the-shelf product. You commission individual modules or continuous support.
Services & results
You get BCM based on BSI Standard 200-4 and ISO 22301 that builds on your existing emergency plans, documentation and communication channels. Your team works with us on the strategy, framework, business impact analysis and workable emergency plans. If you operate an ISMS (information security management system) to ISO 27001 or IT-Grundschutz, the two mesh.
We meet you where you are: at the first workshop or when further developing an existing BCM. We only add what is really missing.
Our introductory workshops create a common understanding among everyone involved – compact and practical. The series covers BCM fundamentals, BCM and emergency documentation, and the business impact analysis. We agree with you which content you need.
Together with you, we develop an individual BCM strategy and a framework that you can maintain over the long term. BSI Standard 200-4 and ISO 22301 provide guidance – even without a certification requirement, they offer a structured approach that third parties can follow.
If you already operate an ISMS to ISO 27001 or BSI IT-Grundschutz, we link the BCM with existing risk management, emergency plans and exercises.
Together with the process owners, we identify the business-critical processes and assess risks, downtimes and potential damage. We include existing information.
Your priorities
A BIA of the agreed processes as the basis for priorities and emergency planning.
We create the strategic documents for emergencies and develop emergency, restart, recovery and business continuity plans. These are complemented by emergency communication plans: who informs whom, with what information, through which channel?
Plans for an emergency
Emergency and communication plans aligned with your responsibilities and available resources.
We plan and support emergency exercises, evaluate them and derive improvement measures with you. Training and workshops for all levels ensure that those involved know their roles.
Regular review and adjustment keep the BCM up to date.
Exercise evaluation
Specific need for improvement identified in the exercise and the measures derived from it.
In Heise's iX Notfallguide 2024, our BCM experts described how organisations can prepare for emergencies in a structured way and what to consider when building a business continuity management system (BCMS). We can provide the article on request.
We advise independently of vendors and do not require BCM software. If another service fits your goals better, we tell you – even if it means less revenue for us.
Because we also build ISMS to ISO 27001 and BSI IT-Grundschutz, we connect BCM and information security instead of creating two separate systems.
Getting started
In the BCM initial consultation, we look at which processes would be affected first by a disruption and which emergency plans already exist. This shows whether prioritisation through a BIA is missing or whether the existing planning should be tested.
Missing contact persons, conflicting priorities or incomplete restart plans are concrete starting points. We involve the responsible people who can explain and address these gaps in day-to-day operations.
Our workshop series creates a shared understanding among those involved. We discuss with you which content suits your start.
Framework, key terms and processes as a common basis for your project.
Structure and content of the required documents, including emergency and communication plans.
Structure, procedure and key elements of the BIA for your further emergency planning.
Your process owners contribute their knowledge of processes and dependencies. You take the decisions on priorities and resources. Emergency plans must then be maintained and exercised regularly. We take these tasks and the necessary involvement into account when agreeing the project scope.
No. secuvera advises independently of vendors and does not require additional BCM software. Processes and requirements are clarified first; after that, it can be assessed whether your existing tools are sufficient for maintaining and using the plans.
The process owners know the consequences of outages and the dependencies. In addition, those responsible for required resources are involved, such as IT, HR or sites. Management decides on priorities and funds; consulting cannot replace these decisions.
Yes. We compare the plans with your current processes, responsibilities and resources. A supported emergency exercise also shows where information is missing or courses of action are unclear. This results in specific improvement tasks.
No. BCM aligned with ISO 22301 or BSI 200-4 and a certification are different goals. We discuss whether you first want to build functioning emergency preparedness or additionally prepare formal evidence.
In Germany on BSI Standard 200-4, internationally on ISO 22301. In some sectors, a standard-compliant BCM is a prerequisite. But even without a certification requirement, the standards provide clear guidance for building, maintaining and further developing it.
